FEDEX PRIVACY NOTICE 


Your trust matters to us. That is why we protect your information and use it responsibly, while continuing to 
deliver theexcellentservicesyouexpectfrom FedEx and itsoperating groups, subsidiaries and divisions 
(hereafter “FedEx”). At FedEx, we are committed to protecting your privacy and the security of information that 
can directly or indirectly be used to identify a natural person (hereafter “Personal Data”). FedEx has created this 
privacy notice (hereafter“Privacy Notice”) to explain how Fed Ex collects and uses Personal Data. 

Last update: July 1, 2020 

When this Privacy Notice mentions “FedEx”, “we”, “us”, or “our”, FedEx is referring to the FedEx company that is 
deciding on the purposes and means of the processing of your Personal Data under this Privacy Notice. 

When you are using our services in Europe, your Personal Data is controlled by FedEx Express International 
B.V., having its headquarters in Floofddorp, The Netherlands. When you are using o ur services glebally, your 
Personal Data is controlled by FedEx Corporation, having its headquarters in Memphis, Tennessee. 

Contact Information: 

FedEx Express International B.V. 

Attn: Legal Department 
Taurusavenue 111 
2132 LS Floofddorp 
The Netherlands 
E: dataprivacy@fedex.com 

FedEx Corporation 

Attn: Legal Department - Compliance 
1000 Ridgeway Loop Road, Ste 500 
Memphis,TN 38120 
United States of America 
E: euprivacy@fedex.com 

Use the following linkforyour requests aboutyour Personal Data: 
https://privacvportal.onetrust.eom/webform/8a471a7b-6a52-49d0-bcb0- 

faSbd b61598f/c121 cce6-6cfb-4c3d -9b61 -334f56a01 b5f 

If you do not have access to a computer, you may call 1.800.463.3339. 

Overview 

This Privacy Notice answers thefollowingquestions: 

1. Does this Privacy Notice apply to you? 

2. What Personal Data does FedEx collect? 

3. Flow does FedEx collect Personal Data? 

4. Does FedEx use cookies? 

5. Why does FedEx process Personal Data? 

6. Who has access to your Personal Data? 

7. Flow long will FedEx process your Personal Data? 

8. What measures does FedEx take to protectyour Personal Data? 

9. Wheredoes FedEx store or transfer your Personal Data? 

10. What rights can you exercise in relation to your Personal Data? 

11. Californiaconsumers 

12. Whatif youhave otherquestionsorcomplaints? 

13. Will there be updates to this Privacy Notice? 




1. Does this Privacy Notice appiy to you? 


This Privacy Notice appiies to you if you are a customer of FedEx, a recipientof a package deiivered by FedEx, a 
supplier of FedEx, or if you contact FedEx, for instance, by visiting www.fedex.com including any (sub)pages and 
mobile apps (hereafter “Websites”), using social media or if you receive emails from FedEx. 

Our Websites are for a general audience and not aimed at children. In principle, we do not collect Personal Data 
from children under age 16. If you are under the age of 16 and you want to use our services, please rely on a 
parentorguardian to assistyou. 

If a child under the age of 16 may have disclosed Personal Data to us, the parent or guardian oan contact us at 
dataprivacy@fedex.com and we will remove Personal Data if required. 

2. What Personal Data does FedEx collect? 

In the course of its business activities and providing theservioes, FedEx will need to process Personal Data. 
Without your Personal Data, we will not be able to provide you with the requested services. As a rule, the 
Personal Datathatyou providedirectlyorindirectlyto FedEx when using ourservioes and visiting our Websites 
are: 


• Contact information. 

This may include your name, address, email address and phone number; 

• Financial information. 

This may includeyourbankaccountnumber,paymentstatus, and invoices; 

• Identification information. 

This may include your driver’s license number. If you don’t have a driver’s license, another identification 
method will be used that ensures us that we can identify you, but is the least privacy invasive as 
possible; 

• Account information. 

This may include log-in details, including your email address, and other information provided through 
your account; 

• User and preference information. 

This includes-as applicable-shipping amounts, complaints, history of purchases and related 
commercial activities, communication, survey information, and shopping preferences. 

• Automatically generated information. 

This will include IP address, unique device or user ID, system and browser type, date and time stamps, 
referring website address, content and pages you accessed on our Websites or mobile apps, dates, 
times and locationsactions take plane, websites you visit (if you con neot to our in-store wireless 
services), click-stream information and device location (if you turn on the feature in the mobile app). 

In addition to the above categories of Personal Data, depending on your interaction with FedEx, we may collect 
other types of information which mayor may not contain Personal Data. Such information related to shipments 
and services may include shipment tracking number, shipment routing information, location data, status of a 
shipment, delivery location, packaging type, number of pieces, weight, picture of the parcel, and customs 
information. 

3. How does FedEx collect Personal Data? 

FedEx collects Personal Data when it is provided by theshipperor acoount holder or by a visitor to our website. 

If you are the shipper or account holder, then we receive your Personal Data directly from you. Examples of 
situatio ns wh ere Fed Ex co Meets Perso n al Data d irectly are: 

• The name, address, and phone number of a person tendering the shipment listed as the shipper. 

• The email address or phone number of a person who requests traoking updatesfor a shipment. 

• The name, address, and email of a person who signs up for FedEx Delivery Manager. 

• The name, address, payment card information, and account number of a person who opens a FedEx 
shipping account. 



If the shipperor account holder provides Personal Data of others, then we receive that Personal Data indirectly. 
Examples of situations where Fed Ex collects Personal Data indirectly are: 

• The name, address, and phonenumberofthe recipientof the shipment. 

• The email address of a person given by the shipper in order to send tracking notifications. 

• Your name and address when you place an order with an on line retailer and Fed Ex delivers the parcel 
to theaddress you provide. 

When FedEx receives Personal Data indirectly, we rely on the provider of the Personal Data for the accuracy of 
the information andthattheproviderhas the authority to provide thatinformationto FedEx. 

4. Does FedEx use cookies? 

Yes, FedEx uses cookies and similar technologies on its Websites. Through these cookies, FedEx automatically 
obtains Personal Data as listed above when you visit our Websites. To learn more about the cookies and similar 
technologies, please consult our cookie notice . 

5. Why does FedEx process Personai Data? 

Personal Data shall be collected, used, stored or otherwise processed when necessary within the framework of 
responsible, efficientand effective business managementof FedEx. FedEx processes Personal Data based on 
applicable legal ground(s). The legal ground is often intrinsically linked to the business purpose. This means, for 
example, that the performance of an agreement can be both a legal ground and a business purpose for FedEx. 
Therefore, we will first clarify the legal ground(s) on which FedEx processes your Personal Data and, 
subsequently, the business purpose(s) that we use your Personal Data for: 

Legal Grounds 

In general, FedEx processes your Personal Data based on oneofthefollowing legal grounds: 

• The processing is necessary to perform an agreement between you and FedEx, 

• The processingis necessary for us to comply with ourlegal obligations, 

• The processing is necessary to protect your vital interests orthoseof other individuals, 

• The processing is necessary for the legitimate interests of FedEx, except where such interests are 
overridden by your interests or fundamental rights and freedo ms, or 

• Where appropriate and required, we will ask foryour consent. 

Business Purposes 

FedEx shall only collect, use or otherwise process Personal Data if the processingfalls with in the scope of one 
(or more) of the legitimate business purposes listed below: 

1. Product development, research and improvement of FedEx products and/or services. FedEx 
processes Personal Data as necessary for the development and improvement of FedEx products and/or 
services, research and development (e.g., analyze information related to the shipment and services to 
improve our services). 

2. Performing agreements. Thisincludesshippingservices,trackingFedExservices,communicationwith 
individuals and other parties regarding services, responding to requests for (further) information, dispute 
resolution and preparing agreements (e.g., linktheshipmenttracking number to youraccountto enable 
youto followyourshipment). 

3. Relationship management and marketing for commercial activities. In general, FedEx processes 
Personal Data as necessary for the development and improvement of FedEx products and/or services, 
account management, client services and the performance of (targeted) marketing activities in order to 
establish a relationship with a client and/or maintaining as well as extending a relationship with a client, 
business partner or supplier and for performing analyses with respect to Personal Data for statistical and 
scientific purposes (e.g..deliver advertising, communications and content from us on our sites and those 
of third parties more specific to your interests). 

4. Business process execution, internal management and management reporting. This includes 
addressing activities such as managing company assets, conducting internal audits and investigations. 



finance and accounting, implementing business controls, provision of central processing facilities for 
efficiency purposes, managing mergers, acquisitions and divestitures and Processing Personal Data for 
management reporting and analysis (e.g., conduct investigations into shipping accounts to detect fraud). 

5. Safety and security. Personal Data shall be included in the processing for activities such as those 
involving safety and health, the protection of FedEx and customer, supplier or business partner assets 
and the authentication of customer, supplier or business partner status and access rights (e.g., provide 
a safe and secure services for online and offline transactions). 

6. Protecting the vitai interests of individuais. This includes processing data when necessary to protect 
your vital interests or those of other individuals (e.g., for urgent medical reasons). 

7. Compliance with legal obligations. This addresses the processing of Personal Dataas necessaryfor 
compliance with laws, regulations and sector specific guidelines to which FedEx is subject (e.g., 
matching names of clients, suppliers and business partners against denied parties’ lists). 

6. Who has access to your Personal Data? 

FedEx shares your Personal Data with third parties in the folio wing circumstances: 

• With its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary 
forthe purposes as listed above. If appropriate, FedEx will require third parties to conduct activities in a 
mannerconsistentwith FedEx policies and guidelines in relationto data protection. 

• With data processors, i.e., parties such as vendors or service providers processing Personal Data on 
our behalf. In such cases, these third parties only use your Personal Data for the purposes described 
above and only in accordance with our instructions. FedEx will only use processors which provide 
sufficient guarantees to implementappropriate technical and organizational measures and ensure the 
protection oftherightsof datasubjects. 

• With its employees if and to the extent necessary forthe performance of their tasks. In such a case, 
access will be granted only if and to the extent necessary forthe purposes described above and only if 
the employee is bound by confidentiality. 

• If and when required to do so by law, court order, or other legal process, for example, with law 
enforcement agencies or other governmental agencies, to establish or exercise our legal rightsor in 
connection with a corporate transaction, such as a divesture, merger, consolidation, or asset sale, or in 
the unlikely eventof bankruptcy. 

7. How long will FedEx process your Personal Data? 

We will retain your Personal Data no longer than necessary for the purpose(s) forwhich we process your 
Personal Data. After the retention period we will delete or anonymize your Personal Data, unless we need to 
retain certain of your Personal Datafor another purpose. We will only do so ifwehavea legal ground to retain 
your Personal Data. We will also ensure that Personal Data are only accessible for that other purpose. 

For example, we need your Personal Data to perform the customs clearance process. Customs laws dictate that 
we haveto retain/store-certain of-those Personal Data. Generally,this period varies fromSto 7 years, 
depending on the applicable country and customs laws. In those cases, we will only store the Personal Data 
necessary to meet our legal obligations. 

Please contact us using the con tact details above if you have questions about specific retention periods. 


8. What measures does FedEx take to protect your Personal Data? 



FedEx maintains appropriate technical and organizational measures to protectyour Personal Data against 
accidental orunlawful processing, including protecting your Personal Data against unauthorized access, 
maintaining the confidentiality, integrity and availability of your Personal data, and training personnel on 
information seourity requirements. 


However, no security measure can guarantee against compromise. You also have an important role in 
protecting your Personal Data. You should notshareyour username and password with anyone, and you 
should not re-use passwords across more than one website. If you have a reason to believe that your 
Personal Data has been compromised, please contact us as detailed above. 

9. Where does FedEx store or transfer your Personal Data? 

Due to the nature of our business and the services we provide to our clients, FedEx may need to transfer your 
Personal Data to locationsoutsidethecountry whereyoureside. In anyoase where we transfer Personal Data, 
FedEx shall ensure that suoh a transfer is subject to appropriate safeguards. For the European Economio Area, 
such transfers to third parties (outside the European Economic Area) will be governed by a con tract based on the 
model contractual clauses for data transfers approved by the European Commission or other appropriate 
safeguards. For more detailed information about these safeguards, please contact dataprivacy@fedex.eom. 

10. What rights can you exercise in relation to your Personal Data? 

Based on the law applioableto the use of your Personal Data, you may have rights thatyouoan exercise in 
relation to your Personal Data. Note that in some cases we are not required to completely comply with your 
request, as such rights may be conditional or because we have to balanoe your rights agai nst our rights and 
obligations to process your Personal Data and to protect the rights and freedoms of others. A number of the 
rights you have in relation to your Personal Data, as applicable in the European Economic Area, the State of 
California, orother USor international geographicjurisdictions, areexplained below: 

Right of access 

You may be entitled to a copy of the Personal Data we hold about you and to learn details about how we use it. 
Your Personal Data will usually be provided to you digitally. We may require you to prove your identity before 
providing the requested information. 

Right to rectification 

We take reason able steps to ensure that the information we hold about you is accurate and complete. However, 
if you believe this is not the case, you may have the right to request that any incomplete or inacourate Personal 
Data that we process aboutyou is amended. 

Right to erasure 

You may have the rightto ask us to erase your Personal Data, for example where the Personal Data we collected 
is no longer necessary for the original purpose, where Personal Data has become obsolete or where you 
with draw your con sent (if we are prooessingyour Personal Data based on consent). However, this will need to be 
balanced agai nst other factors. For example, we may not be able comply with your request due to certain legal or 
regulatory obligations. 

Right to restriction of processing 

You may be entitled to ask us to (temporarily) stop using your Personal Data, for example where you think that 
the Personal Data we hold aboutyoumay be in accurate or where youthinkthatwe no longerneed to use your 
Personal Data. 

Right to data portability 

You may have the rightto ask that we transfer Personal Data that you have provided to us to a third party of your 
choioe.This right can only beexeroised when you have provided the Personal Data to us, and when we are 
processing that data by automated means on the basis of youroonsentor in order to perform our obligations 
under a contrast with you. 

Right to object 

You may have the rightto object to processing which is based on our legitimate interests. In case of the 
processing of Personal Data for marketing purposes, you have the rightto object at any time. When you ask us to 
stop using your Personal Data for marketing purposes, FedEx will immediately oease to use your Personal Data. 



For other purposes based on our legitimate interests, we will no longer process the Personal Data on that basis 
when you file an objection based on your grounds relating to your particular situation, unless we have a 
compelling legitimate ground for the processing. Note, however, that we may not be able to provide certain 
services or benefits If we are unable to process the necessary Personal Data for that purpose. 

Rights relating to automated decision-making 

You may have the right notto be subjected to automated decision-making, including profiling, which produces 
legal effect for you or has a similar significant effect. If you believe you have been subject to an automated 
decision and do not agree with the outcome, you can contact us using the details below and ask us to review the 
decision. 

Right to withdraw consent 

We may ask for your consent to process your Personal Data in specific cases. When we do this, you have the 
right to withdraw your consent at any time. FedEx will stop the further processing as soon as possible after the 
withdrawal of your consent. Flo wever, this does not affect the lawfulness of the processing before con sent was 
withdrawn. 

Use the following link for your requests about these rights: 
httDs://priv rtal.onetri com/webfo rm/8a471 a7b-6a52-49d 0-bcb 
fa8bdb61598f/c121cce6-6cfb-4c3d-9b61-334f56a01b5f 

If you do not have access to a computer, you may call 1.800.463.3339, or contact us using the contact details 
above. 

You can manage your accounts with FedEx through thefollowing. 

• Emails: Foryouremail preferences, visitthe Email Preference Center. 

• Mobile: To opt out for mobile, text STOP to 37473. You can always opt back in by texting YES to the same 
number. 

• Cookies and other technologies: To exercise choices you have for certain cookies, you can generally review 
your Internet browser settings, typically under the sections "Flelp" or "Internet Options". If you disable or delete 
certain cookies In your Internet browser settings, you might not be able to access or use Important functions or 
features of the Websites, and you may be required to re-enteryour log-ln details. 

To learn more about certain cookies used for Interest based advertising by third parties, including through cross¬ 
devicetracking, and to exercise certain choices regarding suchcookies, please visitthe Digital Advertising 
Alliance , Network Advertising Initiative , Digital Advertising Alliance-Canada, European Interactive Digital 
AdvertlsIngAlllance or your device settings. 


11. California consumers 

If you residein California, we are required to provide additional Informatlonto youabouthowwe use and disclose 
your Information, and you may have additional rights with regard to how we use your Information. We have included 
this California-specific Information below. 

Consistentwith the "What Personal Data does FedEx collect?" section above, we collect certain categories and 
specific pieces of information about individuals that are considered "Personal Information" in California. As detailed 
above, we may collect this Personal Information from you and other third parties. We collect, share and disclose 
Personal Information for the business and commercial purposes described in the "Why does FedEx process 
Personal Data?" and " Who has access to vour Personal Data?" sections above. 

We do not "sell" your Personal Information, as this term is defined under California law. Given the divergent 
practices of organizations that offer browsers and the lack of a standard in the marketplace, we do not respond to 
Do NotTracksignalsatthistime. 

Subject to certain exceptions, as a California consumer, you havethe right to: (i) access your Personal Information 
and (ii) obtain deletion of your Personal Information. To the extent permitted by applicable law, we may be required 
to retain someof your Personal Information, and certain Personal information is strictly necessaryin order for us to 
fulfill thepurposes described in this Privacy Policy. 

Should you wish to request the exercise of your other rights as detailed above with regard to your Personal 
Information, we will not discriminate against you by offering you different pricing, products or services, or by 
providing you with a different level orquallty of products or services, based solely upon this request. Please contact 
us as described above to exercisesuch rights. 
















If you are a California consumer and you wish to exercise your rights as outlined in this section, you may need to 
provide information such as name and e-mail so that we can verify your Identity. We will use the Information you 
providewhen exercising your rights forno otherpurposeotherthan to verify your identity. 

You also have the option of designating an authorized agent to exercise your rights on your behalf. For authorized 
agents submitting requests on behalf of California residents, please contact us as described above, with any 
evidence you have that you have been authorized by a California consumer to submit a request on their behalf. 

12. What if you have other questions or compiaints? 

Questions orcomplaints regarding the processing of your Personal Data can be directed to FedEx by using the 
con tact In formation as provided at the top of this Privacy Notice. 

You also have the right to lodge a complaint with the competent (local) data protection or government authority In 
the jurisdiction where you work, where you live or where an alleged Infringement takes place. For individuals In 
the European Economic Area or Switzerland, the lead supervisory authority for FedEx is the Dutch Data 
Protection Authority (Dutch DPA), unless the alleged infringement Is purely a local matter. A listing of the 
European Data Protection Authorities can be found here. 

13. Wiii there be updates to this Privacy Notice? 

FedEx may update this Privacy Notice from time to time. If an amendment will have a serious impact, FedEx will 
endeavor to actively Inform you about such amendments. FedEx will publish an up-to-date Privacy Notice on the 
Websites at all times indicatingthelatestamendments. 

(c)2020 FedEx 



